Welcome to my site. Please CLICK HERE to give your opinions regarding this new look of "PCTipsbyAnu". Thanks for visiting.

Monday, November 15, 2010

Browse » Home » , , , » How to make/write a kernel keylogger?

How to make/write a kernel keylogger?


Hi friends, did u need a keylogger?
If YES, why not write your own keylogger...
Here i provide a tutorial so that you can make your own keylogger as you wish..
 
This article is divided into two parts.  The first part of the paper givesan overview on how the linux keyboard driver work, and discusses methodsthat can be used to create a kernel based keylogger. This part
willbe useful for those who want to write a kernel based keylogger, or to writetheir own keyboard driver (for supporting input of non-supported languagein linux environment, ...) or to program taking advantage of many featuresin the Linux keyboard driver.

  The second part presents detail of vlogger, asmart kernel based linux keylogger,and how to use it.  Keylogger is a veryinteresting code being usedwidely in honeypots, hacked systems, ... by white and black hats.  As mostof us known, besides user space keyloggers (such as iob, uberkey, unixkeylogger,...), there are some kernel based keyloggers. The earliest
kernelbased keylogger is linspy of halflife which was published in Phrack 50. The common method of those kernel basedkeyloggers using is to log userkeystrokes by intercepting sys_read or sys_write system call.
However,this approach is quite unstable and slowing down the whole system noticeablybecause sys_read (or sys_write) is the generic read/write functionof the system; sys_read is called whenever a process wants to read somethingfrom devices (such as keyboard, file, serial port, ...).  In vlogger,I used a better way to implement it that hijacks the tty buffer processingfunction.

  The reader is supposed to possess theknowledge on Linux Loadable Kernel Module.


Here i'm unable to write the full tutorial, so i upload it n provide u a DOWNLOAD LINK

Thanks... 
You can leave a response, or trackback from your own site.

About 'Anu': My name is 'Anu' also Known as 'ANU 007 TIGER' .I'm administrator of 'PC Tips by Anu' blog .This blog was opened for sharing contents about hacking n cracking.
Thanks YAHOO OR GMAIL

1 comments:

Anonymous said...

what's the pass for doc

Post a Comment

 
Back to Top